Yaqoob Kath, CSM®

•Ensure and support applications onboarded to SailPoint in all segments, from Access Request, Privileged Access Management, to Authentication and aligned with system requirements. •Ensure privileged accounts, credentials, and non-human access across tools, applications, and systems are protected. •Resolving ongoing medium to high complexity requests and incidents for IAM Applications, including SailPoint Identity IQ. •Support feed files on critical applications on SailPoint IIQ for the accuracy of attestation. Support escalation process for feed file failures •Collaborate with internal and external teams to resolve issues and identify defects, opportunities for automation and enhancements. Maintain and support test and production environments. •Provide insight on issues on Identity and Access Management to application Custodian/ Business Owners. •Ensure Role Mining, Role & Entitlement SOD Policies are created at the time of Onboarding Applications to SailPoint. •Ensure Entitlement Remediated at the time of Onboarding Applications to SailPoint. •Work effectively as a team member, supporting other members of the team in achieving business objectives and providing client (end-user) support services. •Ensure timely notification and escalation of possible issues/problems, options, and recommendations for prompt resolution. •A deadline-driven and results-oriented individual meets consistently high-quality standards, handling a variety of tasks and deadlines simultaneously. •Prepare for the initial onboarding process, and identify all the credentials that require immediate onboarding as part of the RBC initiative and program roadmap, determine the order in which you should onboard, and define workflows. •Ensure the Identity and Access Management (IAM) system identifies and authorizes users across RBC Enterprise. •Assist in the implementation and monitoring of cybersecurity policies and controls.

• Created and updated the document's current state and future state processes, leveraging Office 365, MS Visio, and SharePoint and ensured the control document was approved by the control owner (VP, AVP). • Participated and led workshops in IT Risk Management in Technology domains: Service Management, Change Management, Resiliency and Recovery, Information Security, User Access Management, Data Management, Project Delivery, and IT Governance and Compliance • Developed high-level and detailed documentation of Control Lifecycle processes for Program Management Governance, SMEs, and key stakeholders. • Facilitated and led cross-functional workshops in IT Risk Management covering Service Management, Change Management, Resiliency & Recovery, Information Security, Access Management, Data Governance, Project Delivery, and IT Compliance. • Initiated and led stakeholder workshops with AVPs, Directors, and SMEs across multiple Lines of Business to drive continuous improvement in IAM, PAM, and PIM practices. • Identified process gaps and collaborated with cybersecurity engineering and development teams to design future state processes aligned with ISO standards and COBIT 5 framework. • Standardized documentation across all technology domains, including process maps, workflows, RASCI charts, and control procedures, ensuring full approval and audit readiness. • Managed project deliverables by maintaining up-to-date project artifacts, overseeing active sprints, and collaborating with product owners to manage JIRA backlogs. • Developed detailed process documentation, business and technical requirements, client-facing job aids, and test plans to validate control execution and effectiveness. • Conducted control testing to validate process design quality and confirm alignment with business requirements and regulatory expectations. • Ensured all compliance activities and documentation adhered to the organization’s broader cybersecurity and risk management framework.

• Participated in Identity and Access Management strategy and framework development. • Assisted with assessments related to risk, and controls and implemented control procedures. • Supported development and/or implementation of standards, policies, procedures, and solutions as it relates to key Access Management controls. • Supported governance practices to monitor, detect, prevent and react to current and emerging security threats to TD. • Supported development of technology risk reporting, monitoring key trends and defining metrics to measure control effectiveness. • Conducted research on emerging technologies aligned with GIAM strategic roadmap • Supported the team in resolving compliance, audit and regulatory issues. • Manages the strategy and roadmap implementation for Identity and Access Management Platform Tools. • Anticipated in developing roadmaps and participating in the standards process for Identity and Access Management (IAM) solutions. • Work with Business Information Security Officers (BISOs), system owners, and other IAM colleagues to address audit and regulatory-related issues • Execute and track security process-related activities including User ID management • Develop business and functional requirements and obtain timely sign-off by all respective parties. Establish working relationships and build partnerships with the Line of Business and IT staff. In-depth knowledge of available graphical tools, techniques and interfaces (i.e., Visio, PowerPoint). • Experience and knowledge of how to define/derive business requirements and specifications and able to contribute insights in discussions with senior stakeholders. • Through elicitation techniques, translates business requirements to systems specifications for moderate to complex business systems; ensure specifications align with business requirements. • Reviews departmental and bank processes or procedures related to supported systems and proposes relevant changes/updates.

Technology Risk Management and Information Security(TRMIS) Global Identity and Access Management (GIAM) Access Management Governance • Worked closely with IAM platform for Business, end users and other support teams to improve Global Identity Governance for DIAMOND. • Identified gaps, assessing controls, and assisting in IAM platform projects to support TD Objectives for Global Identity Governance. • Worked on Active Directory (AD) to streamline the process as well utilized AD to search for legacy accounts ownership and provide artifacts to application owners for accounts removal. • Engaged and maintained process mapping documentation, procedures, and job aids with the client experience summaries. • Provided 2nd-level support to TD enterprise on a DIAMOND platform to help cultivate a positive client / end-user experience. • Performed research, investigation, and analysis to identify correct ownership using SQL queries. • Worked effectively as a team member, supporting other members of the team in achieving business objectives and providing client (end-user) support services. • Communicated support status and provides timely escalation of issues to ensure project objectives are met and clients are supported • Ensured timely notification and escalation of possible issues/problems, options and recommendations for prompt resolution. • Worked in the governance/ Internal control team to implement information security risk. governance and control framework and sustainable methodology for identifying. • Worked with thematic Audit to closed audit findings by providing accurate pieces of information, update process gaps and improve Orphan Management Process to aligned current status. • Improved metrics process by providing high-risk applications artifacts using SQL queries for senior management overview. • In-depth knowledge of available graphical tools, techniques and interfaces (i.e., Visio, PowerPoint).

Enterprise Security Administration & Operations Access Management: IAO\IAR • Engaged with SailPoint implementation project and participated in strategic planning and framework for IdentityIIQ functions • Closely worked with the governance/ Internal control team to implement information security risk governance and control framework and sustainable methodology for identifying, assessing, and documenting information security risk to meet information security requirements. • Worked closely with Business Unit IAM leads, end users and support teams to progress IAM Governance program for SailPoint IdentityIIQ • Liaise with Deloitte senior managers and consultants to identify system defects as well as assist with deploying changes and upgrades for SailPoint IdentityIQ • Identified gaps, assessing controls and assisting in IAM projects to support CIBC’s Objectives in SailPoint IdentityIIQ • Assisted the Security team with becoming secure, vigilant, and resilient by identifying technology risks, performing security risk assessments, and recommending controls that are in line with established practices and industry standards. • Engaged with onboard and operate the Privileged Access Management service such as discovery, reporting and check privileged identities violations • Engaged in process mapping utilized available tools and techniques for an easy transition to Sailpoint • Implement and design Privileged Identity Access Management process to capture and control discrepancy • Engaged with the implementation for change management for role and termination control • Continuously worked on Active Directory (AD) and Network teams to streamline the process as well as align proper ownership to non-people (Privileged) identities • Reconcile records in CyberArk to ensure the right owners are associated with the relevant resources in Privileged Access Management systems